DigiCert Root Compatibility
DigiCert SSL Certificates are issued under one of the oldest and most widely supported roots in the industry. DigiCert roots are trusted by virtually every browser in use today, as well as dozens of smart phones and handheld computing devices.
As one of the largest certificate providers in the world, certificates issued by DigiCert are trusted by all popular browsers, mail clients, and operating systems.
Root CA |
Signature Algorithm |
Serial number |
DigiCert Global Root CA |
SHA1withRSA |
08 3b e0 56 90 42 46 b1 a1 75 6a c9 59 91 c7 4a |
DigiCert Global Root G2 |
SHA256withRSA |
03 3a f1 e6 a7 11 a9 a0 bb 28 64 b1 1d 09 fa e5 |
DigiCert Global Root G3 |
SHA384withECDSA |
05 55 56 bc f2 5e a4 35 35 c3 a4 0f d5 ab 45 72 |
DigiCert High Assurance EV Root CA |
SHA1withRSA |
02 ac 5c 26 6a 0b 40 9b 8f 0b 79 f2 ae 46 25 77 |
Baltimore CyberTrust Root |
SHA1withRSA |
02 00 00 b9 |
VeriSign Class 3 Public Primary Certification Authority – G5 |
SHA1withRSA |
18 da d1 9e 26 7d e8 bb 4a 21 58 cd cc 6b 3b 4a |
Recommended certificate chain
Choose the appropriate certificate chain based on your client requirements.
Client support requirements |
OV hierarchy |
EV hierarchy |
Modern browsers and smart phones |
Mixed SHA256 |
Mixed SHA256 |
Older browsers, smart phones, and feature phones including old versions |
Mixed SHA256 with a cross root under Baltimore Root |
Mixed SHA256 with a cross root under Baltimore Root |
Java |
Mixed SHA256 with a cross root under Baltimore Root |
Mixed SHA256 with a cross root under Baltimore Root |
Non-browser with VeriSign G5 root only |
Full SHA256 with a cross root under VeriSign G5 Root |
Full SHA256 with a cross root under VeriSign G5 Root |
Non-browser with VeriSign G5 root pinning |
Full SHA256 with a cross root under VeriSign G5 Root |
Full SHA256 with a cross root under VeriSign G5 Root |
Root support in common browsers and operating systems
Windows
Root CA |
Windows |
DigiCert Global Root CA |
Windows XP SP3 or higher |
DigiCert Global Root G2 |
Windows XP SP3 or higher |
DigiCert Global Root G3 |
Windows XP SP3 or higher |
DigiCert High Assurance EV Root CA |
Windows XP SP3 or higher |
Baltimore CyberTrust Root |
Windows XP SP3 or higher |
VeriSign Class 3 Public Primary Certification Authority – G5 |
Windows XP SP3 or higher |
Firefox
Reference: https://ccadb-public.secure.force.com/mozilla/IncludedCACertificateReport
Root CA |
Firefox 1 |
Firefox 2 |
Firefox 3.0.2 |
Firefox 32 |
DigiCert Global Root CA |
N/A |
Available |
Available |
Available |
DigiCert Global Root G2 |
N/A |
N/A |
N/A |
Available |
DigiCert Global Root G3 |
N/A |
N/A |
N/A |
Available |
DigiCert High Assurance EV Root CA |
N/A |
Available |
Available |
Available |
Baltimore CyberTrust Root |
Available |
Available |
Available |
|
VeriSign Class 3 Public Primary Certification Authority – G5 |
N/A |
N/A |
Available |
Available |
Apple
Reference:
iOS 5 and 6: https://support.apple.com/en-us/HT201388
iOS 7: https://support.apple.com/en-us/HT203065
iOS 8: https://support.apple.com/en-us/HT205214
Root CA |
iOS 5 and 6 |
iOS 7 |
iOS 8 |
DigiCert Global Root CA |
Available |
Available |
Available |
DigiCert Global Root G2 |
N/A |
Available |
Available |
DigiCert Global Root G3 |
N/A |
Available |
Available |
DigiCert High Assurance EV Root CA |
Available |
Available |
Available |
Baltimore CyberTrust Root |
Available |
Available |
Available |
VeriSign Class 3 Public Primary Certification Authority – G5 |
Available |
Available |
Available |
Reference: https://support.apple.com/en-us/HT203120
Root CA |
OS Leopard |
OS X Mavericks |
OS X Yosemite |
DigiCert Global Root CA |
Available |
Available |
Available |
DigiCert Global Root G2 |
N/A |
Available |
Available |
DigiCert Global Root G3 |
N/A |
Available |
Available |
DigiCert High Assurance EV Root CA |
Available |
Available |
Available |
Baltimore CyberTrust Root |
Available |
Available |
Available |
VeriSign Class 3 Public Primary Certification Authority – G5 |
Available |
Available |
Available |
Android
Root CA |
SDK 1.5 |
SDK 2.2 |
SDK 2.3 |
SDK 5.x |
DigiCert Global Root CA |
Available |
Available |
Available |
Available |
DigiCert Global Root G2 |
N/A |
N/A |
N/A |
Available |
DigiCert Global Root G3 |
N/A |
N/A |
N/A |
N/A |
DigiCert High Assurance EV Root CA |
Available |
Available |
Available |
Available |
Baltimore CyberTrust Root |
N/A |
N/A |
Available |
Available |
VeriSign Class 3 Public Primary Certification Authority – G5 |
N/A |
Available |
Available |
Available |
Java
Root CA |
JRE 1.4.1 |
JRE 1.4.2_17 |
JRE 1.6.0_11 |
JRE 1.6.0_19 |
JRE 1.8.0_101 |
DigiCert Global Root CA |
N/A |
Available |
Available |
Available |
Available |
DigiCert Global Root G2 |
N/A |
N/A |
N/A |
N/A |
Available |
DigiCert Global Root G3 |
N/A |
N/A |
N/A |
N/A |
Available |
DigiCert High Assurance EV Root CA |
N/A |
N/A |
Available |
Available |
Available |
Baltimore CyberTrust Root |
Available |
Available |
Available |
Available |
Available |
VeriSign Class 3 Public Primary Certification Authority – G5 |
N/A |
N/A |
N/A |
Available |
Available |
Mixed SHA256 OV hierarchy
Mixed SHA256 OV hierarchy with a cross root under Baltimore Root
Mixed SHA256 EV hierarchy
Mixed SHA256 EV hierarchy with a cross root under Baltimore Root
Full SHA256 OV hierarchy with a cross root under VeriSign G5 Root
Full SHA256 EV hierarchy with a cross root under VeriSign G5 Root
SSL Intermediate and Root CA Certificates
https://knowledge.symantec.com/support/ssl-certificates-support/index?page=content&id=INFO4033
The need for a cross root under the Baltimore Root or VeriSign G5 Root is handled on a case-by-case basis. Contact Technical Support for help with determining if you have a dependency on one of these roots.